$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/646877e9-7366-3bb4-ac69-199baa007b49.roa File: 646877e9-7366-3bb4-ac69-199baa007b49.roa (raw, json) Hash identifier: FOBSU8Lu3ntAFeG1LxNMVbcNvY+ks+1eOU1ghwzPdog= Subject key identifier: 5B:14:84:03:40:E6:58:46:7C:D8:8E:E1:58:CA:0D:FE:74:2E:D1:6B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AF6D18C2C2C0435661C80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/646877e9-7366-3bb4-ac69-199baa007b49.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 192.124.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f6:d1:8c:2c:2c:04:35:66:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=0567503f-333c-46d1-a07e-573a28e80c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:71:b7:d6:64:de:9d:88:a2:11:31:bb:d8: 90:ba:95:30:a8:3a:79:80:34:c3:8b:48:3d:f1:90: 82:30:46:6d:38:1d:f7:85:bb:5b:0d:6e:59:7b:91: d3:da:ab:ba:cb:88:14:8c:11:8d:3b:69:d8:aa:bf: f7:6d:88:da:83:ba:c1:d9:4c:64:ed:2d:1b:71:43: 93:8b:4f:b4:46:57:8f:73:2f:a4:7d:b6:91:d7:79: 4d:de:75:68:f1:7d:ae:be:f3:a4:e2:be:13:52:fb: 7b:61:9a:0b:0d:a5:07:ba:02:3c:f1:f4:95:6e:79: 3d:5a:11:1c:c5:8d:25:99:b2:7c:d7:4d:cf:4c:13: 15:10:8a:e4:dd:42:f2:69:f0:7c:e3:e3:59:92:a1: e3:10:d6:8b:62:53:c7:4c:78:fe:f4:5e:08:26:04: 63:62:97:ce:69:e3:42:46:7d:cf:62:fc:9b:1d:ed: 7f:f6:f0:b0:2c:ba:d6:f0:68:40:df:bd:a8:f3:0a: 72:39:1b:cd:ec:cf:7f:57:2f:c6:ad:6e:39:c9:43: 1e:8f:4c:83:a1:70:59:75:75:0c:c6:af:2a:60:ae: b6:78:8f:ad:e4:7a:cf:63:5a:c0:07:15:ff:e1:85: 51:fa:26:ef:fa:9b:a3:76:e9:84:2e:3f:12:ae:2b: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:84:03:40:E6:58:46:7C:D8:8E:E1:58:CA:0D:FE:74:2E:D1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/646877e9-7366-3bb4-ac69-199baa007b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 192.124.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:88:86:fd:27:db:8c:eb:89:be:45:8b:95:95:ed:53:67:98: c3:bb:69:71:a6:8b:33:49:9d:41:c7:2a:b8:22:57:b6:83:3b: 0d:a0:6f:6d:e3:e6:a2:92:e0:10:b9:e7:18:07:95:ef:70:fd: ba:4b:98:4a:54:37:80:60:7f:b6:9f:83:fa:c4:15:2d:5d:1a: 5a:eb:b2:c5:08:ea:fb:96:79:ee:75:3f:78:d1:df:3d:9a:1e: 7f:42:98:53:52:8a:aa:5a:9d:67:bd:65:ea:a1:15:06:cf:ee: a2:dc:a1:2e:c1:98:bf:1c:2b:ed:69:a5:1e:2d:c5:a3:bc:7c: 51:df:a3:dc:f2:0e:66:5f:43:7a:b5:d8:be:a2:ea:f8:11:3c: 39:fb:d0:f1:1b:8f:16:be:3f:eb:e0:e8:58:64:b9:a0:a3:a6: d0:5c:a4:6d:21:02:ed:eb:83:4d:c0:a9:5b:64:65:f0:ab:89: f4:39:1c:6c:8b:67:56:4c:1a:7a:c9:a0:10:56:8f:cc:23:ba: 0b:48:9f:ff:f3:f4:7d:c1:d7:3a:51:61:d4:05:2f:ca:30:23: 45:64:34:c9:29:f1:d1:af:f4:34:c0:d9:e8:83:83:75:29:75: 10:54:f9:8a:a4:4d:c9:5b:e6:a3:35:4b:c4:60:86:dd:9f:95: 27:8b:56:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavbRjCwsBDVmHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MDU2NzUwM2YtMzMzYy00NmQxLWEwN2UtNTczYTI4ZTgwYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQNxt9Zk3p2IohExu9iQupUwqDp5gDTDi0g9 8ZCCMEZtOB33hbtbDW5Ze5HT2qu6y4gUjBGNO2nYqr/3bYjag7rB2Uxk7S0bcUOT i0+0RlePcy+kfbaR13lN3nVo8X2uvvOk4r4TUvt7YZoLDaUHugI88fSVbnk9WhEc xY0lmbJ8103PTBMVEIrk3ULyafB84+NZkqHjENaLYlPHTHj+9F4IJgRjYpfOaeNC Rn3PYvybHe1/9vCwLLrW8GhA372o8wpyORvN7M9/Vy/GrW45yUMej0yDoXBZdXUM xq8qYK62eI+t5HrPY1rABxX/4YVR+ibv+pujdumELj8SrivoOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsUhANA5lhGfNiO4VjKDf50LtFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNjQ2ODc3ZTktNzM2Ni0z YmI0LWFjNjktMTk5YmFhMDA3YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHx3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiIhv0n24zrib5Fi5WV7VNnmMO7aXGmizNJnUHHKrgiV7aDOw2gb23j 5qKS4BC55xgHle9w/bpLmEpUN4Bgf7afg/rEFS1dGlrrssUI6vuWee51P3jR3z2a Hn9CmFNSiqpanWe9ZeqhFQbP7qLcoS7BmL8cK+1ppR4txaO8fFHfo9zyDmZfQ3q1 2L6i6vgRPDn70PEbjxa+P+vg6FhkuaCjptBcpG0hAu3rg03AqVtkZfCrifQ5HGyL Z1ZMGnrJoBBWj8wjugtIn//z9H3B1zpRYdQFL8owI0VkNMkp8dGv9DTA2eiDg3Up dRBU+YqkTclb5qM1S8Rght2flSeLVjU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:32 2025 by rpki-client